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Listing of Claims 

1-3. (Cancelled). 

4. (Currently Amended) A method according to Claim [[3]] 5, wherein 
searching the payload of the packet for EP addresses comprises: 

identifying an occurrence of an IP address in the payload of the packet; 

determining a corresponding normalized IP address for the occurrence of the 
IP address using the set of translation rules that the at least one of the source address 
and the destination address was determined to be present in; and 

repeating the identifying and determining for each occurrence of an IP address 
in the payload; 

wherein translating IP addresses comprises replacing at least one occurrence 
of an IP address located in the payload of the packet with the corresponding 
normalized IP address. 

5 . (Currently Amended) A method of processing a packet, comprising: 
receivine a pa cket at a network address translator (NAT) device: 
determining if at least one of a source address and a destination address 

located i n a packet header has been previously translated to a normalized Internet 
Protocol (IP) address: 

searching a pavload of the packet for IP addresses if it is determined that at 
least one of the source address and the destination address located in the packet 
header has been previously translated: and 

translating IP addresses located in the payload of the packet if at least one of 
the source address and the destination address located in the packet header has been 
previously translated by replacing at least one occurrence of an IP address located in 
the payload of the packet., 

wherein determining if at least one of the source address and the destination 
address located in the packet header has been previously translated comprises: 

identifying the source address and the destination address in the packet 

header: and 
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determining i f at least one of the source address and the destination 
address is present in a set of translation rules: 

wherein at least one of t he source address and the destination address has 
been previously trans lated if it is determined that at least one of the source address 
and the destination ad dress is present in a set of translation rules: and 

A mothod acoording to Claim 3, wherein determining if at least one of the 
source address and the destination address located in the packet has been previously 
translated further comprises: 

determining if at least one of the source address and the destination 
address is present in a header translation set of translation rules if it is 
determined that at least one of the source address and the destination address 
is present in the set of translation rules; 

wherein at least one of the source address and the destination address 
has been previously translated if it is determined that the source address and 
the destination address are not present in the header translation set of 
translation rules. 

6. (Original) A method according to Claim 5, further comprising: 
translating at least one of the source address and the destination address 

located in the packet header if it is determined that at least one of the source address 
and the destination address is present in the header translation set of translation rules. 

7. (Original) A method according to Claim 5, wherein determining a 
corresponding normalized IP address comprises determining a corresponding 
normalized IF address for the occurrence of the IP address using the header 
translation set of translation rules. 

8. (Previously Presented) A method according to Claim 5, further 
comprising discarding the packet if it is determined that at least one of the source 
address and the destination address is not present in a set of translation rules and the 
source address and the destination address are not present in the header translation set 
of translation rules. 
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9. (Cuixently Amended) A method according to Claim 3, A method of 
processing a packet, comprising: 

receiving a packet at a network address translator (NAT) device: 

determining i f at least one of a source address and a destination address 
located in a packet header has been previously translated to a normalized Internet 
Protocol (IP) address: 

searching a p avload of the packet for IP addresses if it is determined that at 
Least one of the source address and the destination address located in the packet 
header has been previously translated: and 

translating IP addresses located in the pavload of the packet if at least one of 
the source address and the destination address located in the packet header has been 
previously translated bv replacing at least one occurrence of an IP address located in 
the pavload of the packet, 

wherein determining i f at least one of the source address and the destination 
address located in the packet header has been previously translated comprises: 

identifying the source address and the destination address in the packet 

header: and 

determining if a t least one of the source address and the destination 
address is present in a set of translation rules: 

wherein at least one of the source address and the destination address 
has been prev iously translated if it is determined that at least one of the source 
address and the destination address is present in a set of translation rules: and 
wherein detennining if at least one of the source address and the destination 
address is present in a set of translation rules further comprises: 

determining if at least one of the source address and the destination 
address is present in a plurality of sets of translation rules; and 

discarding the packet if it is determined that at least one of the source 
address and the destination address is present in a plurality of sets of 
translation rules. 
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1 0. (Original) A method according to Claim 9, wherein determining if at 
least one of the source address and the destination address is present in a set of 
translation rules further comprises: 

determining if one of the plurality of sets of translation rules is the header 
translation set of translation rules if it is determined that at least one of the source 
address and the destination address is present in a plurality of sets of translation rules; 
and 

discarding the packet if it is determined that one of the plurality of sets of 
translation rules is not the header translation set of translation rules. 

1 1 . (Currently Amended) A method according to Claim [[3]] 9, wherein 
the set of translation rules comprises a list of each IP address that has been translated 
and a corresponding normalized IP address for each IP address that has been 
translated. 

12. (Original) A method according to Claim 1 1 5 wherein the set of 
translation rules comprises a first set of translation rules that correspond to a fust 
customer and a second set of translation rules that correspond to a second customer. 

13. (Original) A method according to Claim 12, wherein the set of 
translation rules that correspond to the first customer are unique with respect to the set 
of translation rules that correspond to the second customer. 

14. (Currently Amended) A method according to Claim [[1]] 5, wherein 
the packet is a Simple Network Management Protocol (SNMP) packet. 

15. (Original) A method according to Claim 14, wherein each of the IP 
addresses are identified by a unique SNMP object identifier (OID) located within a 
Management Information Base(MEB). 
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16. (Currently Amended) A method according to Claim [[1]] 5, wherein 
the at least one of the source address and the destination address located in the packet 
header is previously translated by a border firewall. 

17. (Currently Amended) A method according to Claim [[1]] 5, wherein 
the at least one of the source address and the destination address located in the packet 
header is previously translated by a router. 

18. (Currently Amended) A method of processing a packet, comprising: 
determining if at least one of a source address and a destination address 

located in a packet header is present in a set of translation rules; 

searching a payload of the packet for IP addresses if it is determined that at 
least one of a source address and a destination address is present in the set of 
translation rules; and 

translating the IP addresses in the payload of the packet using the set of 
translation rules 4 

wherein determining if at least one of the source address and the destinatio n 
address located in the packet header is present in a set of translation rules comprises: 
identifying the source address and the destination address in the packet 

header; 

scanning the set of translation rules to determine if at least one of the 
source address and the destination address is present in the set of translation 
rules; and 

determining if at least one of the source address and the destination 
address is present in a header translation set of translation rules if it is 
determined tha t at least one of the source address and the destination address 
is present in the set of translation rules: 

wherein at least one of the source address and the destination address 
has been previously translated if it is determined that at least one of the source 
address and the destination address is present in a set of translation rules and 
that the source address and the destination address are not present in the 
header translation set of translation rules . 
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1 9. (Original) A method according to Claim 1 8, wherein determining if at 
least one of a source address and a destination address located in a packet header is 
present in a set of translation rules is preceded by receiving a packet at a network 
address translator (NAT) device. 

20. (Original) A method according to Claim 18, wherein translating the IP 
addresses comprises replacing at least one occurrence of an IP address located in the 
payload of the packet. 

21. (Cancelled). 

22. (Original) A method according to Claim 1 8, wherein searching the 
payload of the packet for IP addresses comprises: 

identifying an occurrence of an IP address in the payload of the packet; 

determining a corresponding normalized IP address for the occurrence of the 
IP address using the set of translation rules that the at least one of the source address 
and the destination address was determined to be present in; and 

repeating the identifying and determining for each occurrence of an IP address 
identified in the payload; 

wherein the translating IP addresses comprises replacing at least one 
occurrence of an IP address located in the payload of the packet with the 
corresponding normalized IP address. 

23 * (Currently Amended) A method according to Claim [[2 1 ]] 18, further 
comprising: 

translating at least one of the source address and the destination address 
located in the packet header if it is determined that at least one of the source address 
and the destination address is present in the header translation set of translation rules. 

24. (Original) A method according to Claim 23, wherein determining a 
corresponding normalized IP address comprises determining a corresponding 
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normalized IP address for the occurrence of the IP addresses using the header 
translation set of translation rules. 

25. (Currently Amended) A method according to Claim [[21]] 18, further 
comprising discarding the packet if it is determined that at least one of the source 
address and the destination address is not present in a set of translation rules and the 
source address and the destination address are not present in the header translation set 
of translation rules. 

26. (Currently Amended) A method according to Claim 18 , A method of 
processing a packet comprising: 

determining if at least one of a source address and a destination address 
located in a packet header is present in a set of translation rules: 

searching a pavl oad of the packet for IP addresses if it is determined thai at 
least one of a source address and a destin ati nn add ress is present in the set of 
translation rules: and 

translating the IP addresses in the oavload of the packet using the set of 
translation rules. 

wherein determining if at least one of the source address and the destination 
address is present in a set of translation rules further comprises: 

determining if at least one of the source address and the destination 
address is present in a plurality of sets of translation rules; 

determining if one of the plurality of sets of translation rules is the 
header translation set of translation rules if it is determined that at least one of 
the source address and the destination address is present in a plurality of sets 
of translation rules; and 

discarding the packet if it is determined that at least one of the source 
address and the destination address is present in a plurality of sets of 
translation rules and that one of the plurality of sets of translation rules is not 
the header translation set of translation rules. 
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27. (Original) A method according to Claim 1 8, wherein the set of 
translation rules comprises a list of each IP address that has been translated and a 
corresponding normalized IP address for each IP address that has been translated. 

28. (Previously Presented) A method according to Claim 1 8, wherein the 
set of translation rules comprises a first set of translation rules that correspond to a 
first customer and a second set of translation rules that correspond to a second 
customer. 

29. (Original) A method according to Claim 28, wherein the set of 
translation rules that correspond to the first customer are unique with respect to the set 
of translation rules that correspond to the second customer. 

30. (Original) A method according to Claim 18, wherein the packet is a 
Simple Network Management Protocol (SNMP) packet. 

3 1 . (Original) A method according to Claim 30, wherein each of the IP 
addresses are identified by a unique SNMP object identifier (OID) located within a 
Managemenl Information Base (MIB). 

32. (Original) A method according to Claim 1 8, wherein the at least one of 
the source address and the destination address located in the packet header is 
previously translated by a border firewall. 

33. (Original) A method according to Claim 1 8, wherein the at least one of 
the source address and the destination address located in the packet header is 
previously translated by a router. 

34-35. (Cancelled). 
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36. (Currently Amended) A system according to Claim 3S, - 
A system for processing a packet comprisin g; 

a first network address trans lator (NAT! device that translates at least one of a 
source address and a destination address located in a packet header: and 

a second NAT device thai translates Internet Protocol (IP) addresses located in 
a pavload of the packet if at least one of the source address and the destination 
address ha s been previously translated bv the first NAT device. 

wherein the second NAT device comprises: 

a detector circuit configured to determine if at least one of the so urce 

address and the destination address located in the packet header has been 

previously translated to a normalized IP address: 

_a_scanner circuit configured to search the pavload of the packet for IP 

addresses if i t is determined that at least one of the source address and the 

destination address located in the packet header has been previously 

translated: and 

a pavload translator circuit configured to translate IP addresses bv 
replacing at least one occurrence of an IP address located in the pavload of the 
packet: and 

wherein the detector circuit is further configured to: 

identify the source address and the destination address in the packet 

header; 

determine if at least one of the source address and the destination 
address is present in a set of translation rules; and 

determine if at least one of the source address and the destination 
address is present in a header translation set of translation rules if it is 
determined that at least one of the source address and the destination address 
is present in the set of translation rules; 

wherein at least one of the source address and the destination address 
has been translated if it is determined that at least one of the source address 
and the destination address is present in a set of translation rules and that the 
source address and the destination address are not present in the header 
translation set of translation rules. 
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37. (Currently Amended) A system according to Claim [[35]] 36, wherein 
the scanner circuit is further configured to: 

identify an occurrence of an IP addresses in the payload of the packet; 

determine a corresponding normalized IP address for the occurrence of the IP 
addresses using the set of translation rules that the at least one of the source address 
and the destination address was determined to be present in; and 

repeat identifying and determining for each occurrence of an IP address 
identified in the payload; 

wherein translating IP addresses comprises replacing at least one occurrence 
of an IP address located in the payload of the packet with the corresponding 
normalized IP address. 

38. (Original) A system according to Claim 36, wherein the second NAT 
device further comprises: 

a header translator circuit configured to translate at least one of the source 
address and the destination address located in the packet header if it is determined that 
at least one of the source address and the destination address is present in the header 
translation set of translation rules. 

39. (Original) A system according to Claim 38, wherein the scanner circuit 
is further configured to determine a corresponding normalized IP address for the 
occurrence of the IP address using the header translation set of translation rules. 

40. (Original) A system according to Claim 36, wherein the detector 
circuit is further configured to discard the packet if it is determined that at least one of 
the source address and the destination address is not present in a set of translation 
rules and that the source address and the destination address are not present in the 
header translation set of translation rules. 

41 . (Original) A system according to Claim 36, wherein the detector 
circuit is further configured to: 
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determine if at least one of the source address and the destination address is 
present in a plurality of sets of translation rules; 

determine if one of the plurality of sets of translation rules is the header 
translation set of translation rules if it is determined that at least one of the source 
address and the destination address is present in a plurality of sets of translation rules; 
and 

discarding the packet if it is determined that at least one of the source address 
and the destination address is present in a plurality of sets of translation rules and that 
one of the plurality of sets of translation rules is not the header translation set of 
translation rules. 

42. (Original) A system according to Claim 36, wherein the set of 
translation rules comprises a list of each IP address that has been translated and a 
corresponding normalized IP address for each IP address that has been translated. 

43. (Original) A system according to Claim 36, wherein the set of 
translation rules comprises a first set of translation rules that correspond to a first 
customer and a second set of translation rules that correspond to a second customer. 

44. (Original) A system according to Claim 43, wherein the set of 
translation rules that correspond to the first customer are unique with respect to the set 
of translation rules that correspond to the second customer. 

45. (Currently Amended) A system according to Claim [[34]] 3& wherein 
the packet is a Simple Network Management Protocol (SNMP) packet. 

46. (Original) A system according to Claim 45, wherein each of the IP 
addresses are identified by a unique SNMP object identifier (OID) located within a 
Management Information Base (MIB). 

47. (Currently Amended) A system according to Claim [[34]] 36, wherein 
the first NAT device comprises a border firewall. 
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48. (Currently Amended) A system according to Claim [[34]] 36, wherein 
the first NAT device comprises a router. 

49. (Cancelled). 

50. (Currently Amended) A system for processing a packet, comprising: 
means for determining if at least one of a source address and a destination 

address located in a packet header has been previously translated and is present in a 
set of translation rules; 

means for searching a payload of the packet for IP addresses if it is determined 
that at least one of a source address and a destination address has been previously 
translated and is present in the set of translation rules; and 

means for translating the IP addresses in the payload of the packet using the 
set of translation rules* 

wherein the m eans for determining if at least one of the source address and the 
destination address l ocated in the packet header is present in a set of translation rules 
comprises: 

means for ident ifying the source address and the destination address in 
the packet header: 

means for can ning the set of translation rules to determine if at least 
one of the source address and the destination address is present in the set of 
translation rules: and 

means for determining if at least one of the source address and the 
destination address is present in a header translation set of translation rules if 
it is determined that at least one of the source address and the destination 
address is present in the set of translation rules: 

wherein at least one of the source address and the destination address 
has been previously translated if it is determined that at least one of the source 
address and the destination address is present in a set of translation rules and 
that the source address and the destination address are not present in the 
header translation set of translation rules . 
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51. (Cancelled). 

52. (Currently Amended) A computer program product for processing a 
packet, comprising: 

a computer readable program medium having computer readable program 
code embodied therein, the computer readable program code comprising: 

computer readable program code which determines if at least one of a source 
address and a destination address located in a packet header has been previously 
translated and is present in a set of translation rules; 

computer readable program code which searches a payload of the packet for IP 
addresses if it is determined that at least one of a source address and a destination 
address has been previously translated and is present in the set of translation rules; 
and 

computer readable program code that translates the IP addresses in the payload 

of the packet using the set of translation rules^ 

wherein the computer readable program code configured to determine if at 

least one of the source add ress a nd the destination address located in the packet 

header is present in a set of translation rules comprises: 

computer read able program code configured to identify the source 
address and the destination address in the packet header: 

computer readable program code configured to scan the set of 
translation rules to determine if at least one of the source address and the 
destination address is present in the set of translation rules: and 

computer readable program code configured to determine if at least 
one of the source address and the destination address is present in a header 
translation set of translation rules if it is determined that at least one of the 
source address and the destination address is present in the set of translation 
rules: 

wherein at least one of the source address and the destination address 
has been previously translated if it is determined that at least one of the source 
address and the destination address is present in a set of translation rules and 
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that the source address and the destination address are not present in the 
header translation set of translation ru^es 
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